EP3514638A1 - Automatische manipulationsdetektion in vernetzten steuerungssystemen - Google Patents
Automatische manipulationsdetektion in vernetzten steuerungssystemen Download PDFInfo
- Publication number
- EP3514638A1 EP3514638A1 EP19150418.2A EP19150418A EP3514638A1 EP 3514638 A1 EP3514638 A1 EP 3514638A1 EP 19150418 A EP19150418 A EP 19150418A EP 3514638 A1 EP3514638 A1 EP 3514638A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- network component
- configuration data
- configuration
- control manager
- network
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000001514 detection method Methods 0.000 title claims description 46
- 238000000034 method Methods 0.000 claims description 57
- 238000012545 processing Methods 0.000 claims description 57
- 230000004044 response Effects 0.000 claims description 34
- 238000004891 communication Methods 0.000 claims description 28
- 238000004590 computer program Methods 0.000 claims description 11
- 238000012544 monitoring process Methods 0.000 claims description 7
- 230000006870 function Effects 0.000 abstract description 11
- 230000008569 process Effects 0.000 description 15
- 238000005259 measurement Methods 0.000 description 10
- 238000010586 diagram Methods 0.000 description 7
- 238000004458 analytical method Methods 0.000 description 6
- 230000008859 change Effects 0.000 description 6
- 238000004519 manufacturing process Methods 0.000 description 4
- 239000000126 substance Substances 0.000 description 4
- 238000012790 confirmation Methods 0.000 description 3
- 230000007613 environmental effect Effects 0.000 description 3
- 230000003213 activating effect Effects 0.000 description 2
- 230000000712 assembly Effects 0.000 description 2
- 238000000429 assembly Methods 0.000 description 2
- 238000001311 chemical methods and process Methods 0.000 description 2
- 230000007274 generation of a signal involved in cell-cell signaling Effects 0.000 description 2
- 238000007689 inspection Methods 0.000 description 2
- 238000013021 overheating Methods 0.000 description 2
- 239000007787 solid Substances 0.000 description 2
- 230000001133 acceleration Effects 0.000 description 1
- 238000013459 approach Methods 0.000 description 1
- 238000003491 array Methods 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 230000036541 health Effects 0.000 description 1
- 230000007257 malfunction Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0428—Safety, monitoring
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0208—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the configuration of the monitoring system
- G05B23/0213—Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0259—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the response to fault detection
- G05B23/0286—Modifications to the monitored process, e.g. stopping operation or adapting control
- G05B23/0291—Switching into safety or degraded mode, e.g. protection and supervision after failure
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/90—Details of database functions independent of the retrieved data types
- G06F16/903—Querying
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/44—Program or device authentication
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24042—Signature analysis, compare recorded with current data, if error then alarm
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24065—Real time diagnostics
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/25—Pc structure of the system
- G05B2219/25061—Configuration stored in central database
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/25—Pc structure of the system
- G05B2219/25074—Check system, change failing element, compare with stored configuration
Definitions
- NCSs networked control systems
- NCSs Networked Control Systems
- sensors and actuators communicate with a controller via a communications network.
- Such systems are used, for example, to monitor and control the functions and processes that occur in a variety of different settings that include, but are not limited to, autonomous systems, manufacturing plants, chemical and nuclear plants, and environmental control systems, as well as those that are utilized on or with aircraft and satellites.
- the controller performs the monitoring and control functions by exchanging feedback information and control signals with the different sensors and actuators in the system.
- the controller, the sensors, and the actuators should all have each other's correct and most current configuration information. Discrepancies in the configuration information between these components can increase the risk of a system malfunction.
- Examples of the present disclosure relate to methods and apparatuses for automatically discovering the hardware and/or software configurations of the various components of a Networked Control System (NCS), and for automatically detecting whether these components have been tampered with.
- Such components can include, but are not limited to, sensors, actuators, and other automated devices capable of performing an automated or predetermined process or function.
- these examples may be implemented by a computing device communicatively positioned in the NCS between the sensors, actuators, and other automated devices, and a control manager configured to manage the operation of the NCS components.
- a configuration management device is in an automated system having a plurality of network components and a control manager that manages the plurality of network components.
- the configuration management device comprises a communications interface and processing circuitry operatively connected to the communications interface.
- the communications interface is configured to communicate with the plurality of network components and with the control manager.
- the processing circuitry is configured to detect a discrepancy in configuration data received from a network component based on a comparison of the configuration data with reference configuration data stored in a database, and responsive to detecting the discrepancy, send a tamper detection signal to the control manager indicating that the network component has been tampered with.
- one of the configuration data and the reference configuration data is software configuration data
- the other of the configuration data and the reference configuration data is hardware configuration data
- one example of the processing circuitry is configured to detect that the control manager is using an incorrect software component to control the network component.
- another example of the processing circuitry is configured to detect that the control manager is using incorrect configuration parameters to control the network component.
- another example of the processing circuitry is configured to detect that the control manager is using an incorrect configuration for the network component to interpret signals received from the network component.
- the tamper detection signal causes the control manager to either suspend operation of the network component, or switch from communicating with the network component to communicating with a redundant network component.
- the processing circuitry is further configured to detect that no discrepancy in the configuration data received from a network component.
- the processing circuitry is configured to monitor characteristics of data sent by the network component to the control manager while the network component is in an operational mode, detect a discrepancy in the characteristics of the data sent by the network component based on a comparison to reference characteristics stored in the database, and send the tamper detection signal to the control manager indicating that the network component has been tampered with responsive to detecting the discrepancy in the characteristics of the data sent by the network component.
- the characteristics of the data sent by the network component comprise one or more of a signal pattern, a rate at which the network component sends the data to the control manager, and a type of signal that is sent from the network component to the control manager.
- the network component comprises one of a sensor and an actuator.
- a method of controlling an automated system comprising a plurality of network components and a control manager that manages the plurality of network components comprises detecting a discrepancy in configuration data received from a network component based on a comparison of the configuration data with reference configuration data stored in a database, and responsive to detecting the discrepancy, indicating that the network component has been tampered with to the control manager.
- the method further comprises determining whether the network component is one of a recognized network component and an unrecognized network component.
- the method further comprises comparing the configuration data with the reference configuration data responsive to determining that the network component is a recognized network component.
- the method further comprises indicating that the network component has been tampered with to the control manager responsive to determining that the network component is an unrecognized network component.
- the method further comprises detecting that no discrepancy exists in the configuration data. Responsive to detecting that no discrepancy exists in the configuration data, the method further comprises monitoring characteristics of data sent by the network component to the control manager while the network components are in an operational mode, detecting a discrepancy in the characteristics based on a comparison of the characteristics to reference characteristics stored in the database, and indicating that the network component has been tampered with to the control manager responsive to detecting the discrepancy in the characteristics.
- one of the configuration data and the reference configuration data is software configuration data
- the other of the configuration data and the reference configuration data is hardware configuration data
- indicating that the network component has been tampered with to the control manager comprises generating and sending a tamper detection message to the control manager.
- the tamper detection message comprises information identifying the network component, and an indicator that causes the control manager to either suspend operation of the network component, or to switch from communicating with the network component to communicating with a redundant network component.
- the method further comprises sending a request message for the configuration data to one or more of the plurality of network components, and receiving a response message from the network component.
- the response message comprises the configuration data of the network component.
- the method further comprises inspecting a header of the response message, determining a protocol used by the network component to send the response message, and processing the response message to obtain the configuration based on the determined protocol.
- the present disclosure provides a non-transitory computer readable medium storing a computer program product configured to control a programmable computing device.
- the computer program product comprises software instructions that, when executed on processing circuitry of the programmable computing device, cause the processing circuitry to detect a discrepancy in configuration data received from a network component based on a comparison of the configuration data with reference configuration data stored in a database, and responsive to detecting the discrepancy, send a tamper detection signal to the control manager indicating that the network component has been tampered with.
- Examples of the present disclosure relate to an apparatus and corresponding method for automatically discovering the hardware and/or software configurations of the sensors, actuators, and other automated devices that comprise a Networked Control System (NCS), and for automatically detecting whether these NCS components have been tampered with.
- NCS Networked Control System
- tampering is detected by performing an analysis of the software and/or hardware configuration information for each of the NCS components in the system at a configuration manager device. Should tampering be detected, examples of the present disclosure are configured to automatically suspend and/or cease the operations and processes of "tampered-with" components, and in some cases, activate redundant components to avoid a possible catastrophe.
- examples described herein are suitable for use in many different types of systems, plants, and assemblies.
- examples of the present disclosure could be utilized to monitor and control the sensors and actuators associated with robotic assemblies, autonomous systems, environment control systems, systems used in the manufacturing of, or systems used on, aircraft and spacecraft, or even chemical processes performed at a chemical plant.
- sensors, actuators, and automated devices employed by these types of systems, which makes monitoring and controlling the operation of each of these components difficult and complex.
- the need to manually monitor and detect whether the sensors and actuators of the NCS have been tampered with is greatly reduced or eliminated, thereby saving money, improving the safety of operations, and increasing the quality and reliability of any products and/or services produced by such systems and plants.
- Figure 1 illustrates an NCS 10 configured according to one example of the present disclosure.
- NCS 10 can comprise other needed and/or desired components not specifically identified or mentioned.
- NCS 10 comprises multiple networked components including one or more sensors 12a, 12b, 12c (collectively, "12"), a control manager 14, one or more actuators 16, a plant/process 18, and a configuration manager 20.
- Each of these components is communicatively connected via one or more wireless and/or wired communication networks that utilize any known transmission protocol or combination thereof to exchange information and signals.
- Such protocols include, but are not limited to, TCP/IP, BACnet, Modbus, IEEE 802.xx, InfraRed, and BLUETOOTH.
- the sensors 12 comprise one or more devices and/or hardware circuits configured to measure corresponding characteristics of the physical environment in which they operate.
- the sensors 12 can be the same or different devices, and thus, can be configured to sense or measure the same or different characteristics at or during any time interval needed or desired.
- the NCS 10 of Figure 1 illustrates sensors 12 as comprising one or more thermometers 12a configured to measure temperature, one or more optical sensors 12b configured to measure light (or lack thereof), and one or more accelerometers 12c configured to measure the acceleration of an object to which the NCS 10 is connected.
- Other sensors are certainly possible, even though, for simplicity sake, they are not expressly shown in the Figures.
- Such sensors include, but are not limited to, gyroscopes, pressure sensors, tilt sensors, proximity sensors, speed sensors, acoustic sensors, sensors associated with navigational equipment, force sensors, density sensors, environmental sensors, chemical sensors, and the like.
- the control manager 14 is a computing device configured to monitor the health and operation of each of the components comprising NCS 10, and to control the operation of those components.
- the control manager 14 receives the signals and information from each of the sensors 12 indicating their respective measurements.
- the signals and information can be received by the control manager 14 periodically as part of an automated measurement cycle, in response to an explicit request sent to the sensors 12, or both. Regardless of the time interval, however, control manager 14 is configured to analyze the signals and information received from the sensors 12. Based on the analysis, control manager 14 generates and sends corresponding control signals to control the various different components of NCS 10 in accordance with the analysis.
- control manager 14 receives a signal from thermometer 12a indicating that a primary power supply (not shown) with which thermometer 12a is associated is overheating. Responsive to determining the overheating condition, control manager 14 could generate and send a control signal or set of control signals to the primary power supply causing it to power down, go "off-line,” or otherwise cease or suspend operation. Additionally, or alternatively, control manager 14 can generate and send a different control signal or set of control signals to a "back-up" (i.e., redundant) power supply to automatically activate that particular redundant component.
- a back-up i.e., redundant
- Actuator 16 comprises one or more actuators associated with the NCS 10.
- Such actuators 16 can be any type of actuators needed or desired, and that are configured to perform some function.
- suitable actuators include, but are not limited to, pneumatic actuators, electrical actuators, thermal actuators, mechanical actuators, linear actuators, and rotary actuators.
- these actuators 16 can be used to actuate a process, operation, or function performed by the plant/process 18, and is controlled by one or more control signals that are generated by, and received from, control manager 14.
- control signals are generated and sent by the control manager 14 responsive to receiving the measurement signals and information from sensors 12.
- control manager 14 can utilize the measurement signals and information to suspend or cease the functionality of actuators 16, and/or activate a redundant actuator 16.
- the plant/process 18 comprises a device or system of devices (e.g., an assembly) that are also controlled by control manager 14 responsive to the measurement signals and information received from sensors 12.
- the plant/process 18 can comprise a robotic arm assembly having an actuator 16. The operation of the robotic arm assembly, therefore, is controlled by the control manager 14 via the actuator 16 responsive to an analysis performed on measurement signals and information received from one or more of the sensors 12.
- the plant/process 18 can be any type of plant or process needed or desired, and can include devices and systems such as a robotic arm, autonomous systems, an aircraft environmental control system, a chemical process performed by equipment in a chemical plant, a manufacturing process in a manufacturing plant, and the like.
- the configuration manager 20 is communicatively interposed between the sensors 12, the actuators 16, and the control manager 14.
- configuration manager 20 comprises a stand-alone computing device communicatively connected to the network.
- configuration manager 20 and control manager 14 execute on the same computing device. Regardless of whether the configuration manager 20 is a stand-alone device, or comprises a function that executes concurrently with the control manager 14 on the same computing device, however, configuration manager 20 automatically discovers the software and/or hardware configuration settings for each of the sensors 12 and actuators 16, and then monitors the configuration information of the sensors 12 and actuators 16 to automatically determine whether any of these components have been tampered with.
- configuration manager 20 If and when the configuration manager 20 detects an anomaly in the configuration information of a sensor 12 and/or actuator 16, which can indicate potential tampering, configuration manager 20 generates and sends one or more tamper detection signals to control manager 14 to cause that device to suspend or cease the operation of that particular sensor 12 and/or actuator 16.
- the tamper detection signal sent by the configuration manager 20 also causes the control manager 14 to generate one or more control signals to replace the functionality of a "tampered-with" component. More particularly, upon receiving the tamper detection signal, control manager 14 generates the control signals required to activate a redundant component, and then switches from communicating with the "tampered-with" component to communicating with the newly-activated redundant component. Controlling the operation of the control manager 14 in this manner communicatively isolates the "tampered-with" component from the network and communicatively inserts the newly activated redundant component into the network, thereby allowing the newly activated redundant component to communicate and/or be controlled by the control manager 14.
- configuration manager 20 For example, consider a situation where configuration manager 20 detects that accelerometer 12c has likely been tampered with. In such cases, configuration manager 20 would generate and send a tamper detection signal to the control manager 14 indicating the tampering. Control manager 14 would then, in turn, generate and send one or more control signals to accelerometer 12c to bring the accelerometer 12c "off-line,” effectively isolating the accelerometer 12c from communicating any further measurement signals and information to the control manager 14. Then, control manager 14 could generate and send the control signals needed to activate a predetermined replacement accelerometer 12c.
- configuration manager 20 would ensure that the replacement accelerometer 12c and the control manager 14 have the current software and/or hardware configuration settings, and then control one or both of the newly-activated accelerometer 12c and the control manger 14 to begin communicating with each other in a normal operational mode.
- Figure 2 is a flow diagram illustrating a method 30, implemented at configuration manager 20, for handling an NCS component (e.g., sensor 21 and/or actuator 16) that has been tampered with according to one example of the present disclosure.
- configuration manager 20 first detects a discrepancy in configuration data that has been received from a network component - for example, sensor 12a or actuator 16 (box 32).
- configuration discrepancies can indicate tampering and can be detected using various methods. In this example, however, any configuration discrepancies, and thus, tampering, are detected by configuration manager 20 based on the results of a comparison of the configuration data received from the network component and reference configuration data retrieved for the network component.
- the reference configuration data which is stored in a database accessible to the configuration manager 20, comprises a set of expected software and/or hardware configuration parameter values for the network component.
- each network component in NCS 10 has its own set of reference configuration data; however, the present disclosure is not so limited.
- the same or similar types of network components can share the same or similar set of reference configuration data.
- a discrepancy is determined when the comparison performed by the configuration manager 20 reveals that one or more parameters in the configuration data received from the network component deviates from one or more corresponding parameters in the reference configuration data by a predefined threshold amount (e.g., 5%).
- configuration manager 20 can determine such configuration discrepancies whenever the value of a particular configuration parameter received from the network component deviates from the expected value in the corresponding configuration parameter stored in the reference configuration data.
- some configuration parameters can be considered more critical than configuration parameters for effecting communication with, and control of, the network component. Therefore, one example of the present disclosure prioritizes the configuration parameters for the network components in order of importance. Thereafter, for any given network component, the configuration manager 20 interprets any deviation of a prioritized parameter from the corresponding expected configuration parameter stored in the reference configuration data, however slight, as tampering.
- configuration manager 20 is configured to interpret such discrepancies as tampering, and as such, sends a "tamper detection signal" to the control manager 14 (box 34).
- the tamper detection signal in one example, comprises a message that identifies the particular network component that has been tampered with, and in some examples, includes both the various configuration data provided by the network component and the set of reference configuration data (or link thereto) that was used in the comparison. So informed, the control manager 14 can temporarily or permanently suspend or cease the operation of the affected network component, and/or replace the functionality of that network component in NCS 10 by activating a redundant network component, as previously described.
- Figures 3A-3C illustrate a method 40 for detecting whether a network component (e.g., sensor 12a and/or an actuator 16) has been tampered with, and for controlling the functions of that network component due to the detected tampering according to one example of the present disclosure.
- a network component e.g., sensor 12a and/or an actuator 16
- the examples illustrated by method 40 are implemented at the configuration manager 20, which can be a stand-alone computing device or a shared computing device that also implements the functionality of the control manager 14.
- Method 40 begins with the configuration manager 20 receiving a request from the control manager 14 to obtain the configuration data for one or more sensors 12 and one or more actuators 16 managed by control manager 14 (box 42).
- the request message comprises information that identifies one or more particular sensors 12 (e.g., sensor 12a) and/or one or more particular actuators 16 for which configuration data is needed.
- the request message comprises a command, instruction, or message that causes the configuration manager 20 to obtain the configuration data from all sensors 12 and actuators 16 managed by control manager 14.
- configuration manager 20 generates and sends a configuration information request message to the sensors 12 and/or actuators 16 responsive to receiving the request from control manager 14 (box 44).
- configuration manager 20 In response to sending the configuration request message(s), configuration manager 20 will receive a response message from the sensors 12 and actuators 16 (box 46).
- each response message comprises data identifying the particular sensor 12 or actuator 16 (e.g., a device ID or network address) that sent the response message, as well as one or more parameter values that identify the current configuration (i.e., hardware and/or software) of the sensor 12 or actuator 16. Other information and data is also possible.
- configuration manager 20 uses the information in the response message to determine how to process the response message (box 48).
- one or more of the sensors 12 and/or one or more of the actuators 16 in NCS 10 communicate with other devices in NCS 10, such as the configuration manager 20 and control manager 14, utilizing disparate protocols.
- one or more of the sensors 12 and/or actuators 16 utilize different formats to report their respective configuration data.
- the use of varying formats can be due to the fact that the sensors 12 and actuators 16 are made by various third party manufacturers. Even in cases where these components are provided by the same manufacturer, the formats utilized by sensors 12 and/or actuators 16 to store and/or report configuration data can change with manufacturer updates to the component's software and/or hardware.
- configuration manager 20 configures configuration manager 20 to analyze the headers of the incoming response messages. Based on the information contained in the header, and/or the formatting of the information in the header, configuration manager 20 can determine how to process (e.g., parse) the information in a given incoming response message to extract the desired configuration parameter data.
- configuration manager 20 compares the received configuration information to the reference configuration information for the particular sensor 12 or actuator 16 that sent the response message (box 50). For example, in one example, the configuration manager 20 utilizes the ID of the particular sensor 12 or actuator 16 that sent the response message as an index into a database of reference configuration files (box 52). If the configuration information for the network component cannot be located in the database, configuration manager 20 assumes that the particular sensor 12 or actuator 16 that sent the response message has been tampered with, is invalid, or does not belong on the network. At any rate, the absence of reference configuration information for the particular sensor 12 or actuator 16 indicates that there is no configuration information on which control manager 14 can base its control of the component.
- configuration manager 20 simply generates and sends a tamper detection signal to the control manager 14 (box 56).
- the tamper detection signal indicates to the control manager 14 that the sensor 12 or actuator 16 that sent the response message has been tampered with, and causes the control manager 14 to temporarily or permanently suspend or halt the operation of that component.
- the tamper detection signal can cause the control manager 14 to temporarily or permanently replace the functionality of a "tampered-with" sensor 12 or actuator 16 with a redundant sensor 12 or actuator 16 by activating the redundant sensor 12 or actuator 16.
- configuration manager 20 will compare the configuration information received in the response message to the reference configuration information (box 54). If the comparison reveals that the configuration information received in the response message does not match the reference configuration information to within a predefined threshold (e.g., 5%), or that the values of one or more "prioritized" configuration parameters do not match the expected values of the corresponding configuration parameters in the reference configuration information, configuration manager 20 will generate and send a tamper detection signal to the control manager 14, as previously described (box 56).
- a predefined threshold e.g., 5%
- configuration manager 20 generates and sends a configuration confirmation signal to control manager 14 (box 58).
- the configuration confirmation signal generated and sent to the control manager 14 indicates that the particular sensor 12 or actuator 16 is "valid" and has not been tampered with. Because of such confirmation, control manager 14 can begin communicating with the particular sensor 12 or actuator 16 normally with a high degree of confidence, and generate the control signals required to control the operation of that component. Such control, as stated above, is based on the measurement data sent by the sensors 12 and/or actuators 16.
- configuration manager 20 is configured to periodically monitor the operations of sensors 12 and actuators 16 to determine whether any of those devices have been tampered with (box 60).
- configuration manager 20 is configured, in one example, to intercept measurement data and other information from sensors 12 and/or actuators 16. Based on time-qualified analysis of the received data, configuration manager 20 can determine whether the sensors 12 or actuators 16 reporting the configuration and data information are operating normally or abnormally.
- configuration manager 20 can base its determination on a variety of different characteristics including, but are not limited to, the measurement data provided by a sensor 12, the changes in the characteristics or patterns of the signals output by a sensor 12 or actuator 16 (e.g., whether the signal is an oscillating signal or a flat signal), a detected rate of change in a signal provided by a sensor 12 or actuator 16, an unexpected change in the intervals at which such signals are provided, a change in signal type provided by the sensor 12 or actuator 16, and the like.
- configuration manager 20 can compare the received characteristics to a set of reference characteristics stored in a database (box 62) to determine whether an unexpected change in those characteristics has occurred.
- configuration manager 20 If, as a result of the comparison, the configuration manager 20 detects an unexpected change in the operating characteristics of the sensor 12 and/or actuator 16 (box 64), configuration manager 20 will generate and send a tamper detection signal to control manager 14, as previously described (box 66). Otherwise, configuration manager 20 continues to periodically monitor the operating characteristics of the sensors 12 and/or actuators 16 (box 60).
- the configuration manager 20 of the present disclosure is implemented as one or more computing devices, such as one or more workstations or a network-based computer servers (e.g., application servers), for example.
- Figure 4 is a functional block diagram illustrating some of the components comprising one such configuration manager 20 configured according to one example of the present disclosure.
- configuration manager 20 comprises processing circuitry 70 communicatively coupled via one or more busses to communications interface circuitry 72 and memory 74.
- processing circuitry 70 comprises one or more microprocessors, microcontrollers, hardware circuits, discrete logic circuits, hardware registers, digital signal processors (DSPs), field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), or a combination thereof.
- processing circuitry 70 includes programmable hardware capable of executing software instructions stored, e.g., as a machine-readable configuration management control program 76 in memory 74, to implement the examples of the present disclosure.
- processing circuitry 70 is configured to execute a configuration management control program 76 to implement the examples of the disclosure previously described.
- a configuration management control program 76 to implement the examples of the disclosure previously described.
- Such examples include, but are not limited to, detecting whether one or more sensors 12 and/or one or more actuators 16 have been tampered with based on the results of a comparison between the configuration information of those devices and reference configuration information stored at a database, and sending a tamper detection signal to a control manager 14 responsive to detecting such tampering.
- Communications interface circuitry 72 comprises circuitry configured to allow the configuration manager 20 to communicate data and information with one or more remotely located devices. As previously described, these devices include the sensors 12, the control manager 14, the actuators 16, and the plant/process 18 that comprise the NCS 10, as well as a database (not shown) to retrieve reference configuration information.
- communications interface circuitry 72 comprises an ETHERNET card or other circuit specially configured to allow configuration manager 20 to communicate data and information over a computer network.
- communications interface circuitry 72 includes a transceiver configured to send and receive communication signals to and from another device via a wireless network.
- communications interface circuitry 72 comprises the necessary hardware and software to allow configuration manager 20 to communicate with some devices over a wireless network and with other devices over a wireless network.
- Memory 74 comprises any non-transitory machine-readable storage media known in the art or that may be developed, whether volatile or non-volatile, including (but not limited to) solid state media (e.g., SRAM, DRAM, DDRAM, ROM, PROM, EPROM, flash memory, solid state drive, etc.), removable storage devices (e.g., Secure Digital (SD) card, miniSD card, microSD card, memory stick, thumb-drive, USB flash drive, ROM cartridge, Universal Media Disc), fixed drive (e.g., magnetic hard disk drive), or the like, individually or in any combination.
- solid state media e.g., SRAM, DRAM, DDRAM, ROM, PROM, EPROM, flash memory, solid state drive, etc.
- removable storage devices e.g., Secure Digital (SD) card, miniSD card, microSD card, memory stick, thumb-drive, USB flash drive, ROM cartridge, Universal Media Disc
- fixed drive e.g., magnetic hard disk drive
- FIG. 5 is a functional block diagram illustrating the functional modules and/or units comprising the processing circuitry 70 of a configuration manager 20 according to one example of the present disclosure.
- processing circuitry 70 implements a communications unit/module 80, a processing determination unit/module 82, a reference data retrieval unit/module 84, a component recognition unit/module 86, a discrepancy detection unit/module 88, a tamper detection signal generation unit/module 90, and network component monitoring unit/module 92.
- the communications unit/module 80 is configured to establish and maintain communications paths with each of the sensors 12, control manager 14, actuators 16, plant/process 18, and the database that stores the reference configuration information. Additionally, the communications unit/module 80 is configured to send request messages to the sensors 12 and actuators 16 for configuration information, and receive response messages comprising the requested configuration information from sensors 12 and actuators 16.
- the processing determination unit/module 82 is configured to analyze the incoming response messages received from sensors 12 and actuators 16 to determine how to process the configuration information.
- the analysis can comprise, for example, a deep inspection of the contents of received packets and/or an inspection of the packet headers. Other methods are also possible, so long as those methods allow the processing determination unit/module 82 to identify a processing path for processing the incoming configuration information.
- the reference data retrieval unit/module 84 is configured to retrieve the reference configuration information for each sensors 12 and actuator 16 from a database or other storage medium.
- the component recognition unit/module 86 is configured to determine the identity of the particular sensor 12 and/or actuator 16 that sent the incoming response message. Such information is useful for assisting the reference data retrieval unit/module 84 in retrieving the correct reference configuration information.
- the discrepancy detection unit/module 88 is configured to compare the configuration information received from the various sensors 12 and actuators 16 to the appropriate reference configuration.
- the tamper detection signal generation unit/module 90 is configured to generate a tamper detection signal based on the results of the comparison performed by discrepancy detection unit/module 88, and send the generated tamper detection signal to the control manager 14.
- the network component monitoring unit/module 92 is configured to monitor the various sensors 12 and actuators 16 in NCS 10 during normal operation to detect whether any of the sensors 12 and actuators 16 are tampered with during normal operation.
- Examples of the present disclosure further include various methods and processes, as described herein, implemented using various hardware configurations configured in ways that vary in certain details from the broad descriptions given above.
- one or more of the processing functionalities discussed above may be implemented using dedicated hardware, rather than a microprocessor configured with program instructions, depending on, e.g., the design and cost tradeoffs for the various approaches, and/or system-level requirements.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Automation & Control Theory (AREA)
- Databases & Information Systems (AREA)
- Computational Linguistics (AREA)
- Data Mining & Analysis (AREA)
- Testing And Monitoring For Control Systems (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US15/876,638 US10922412B2 (en) | 2018-01-22 | 2018-01-22 | Automatic tampering detection in networked control systems |
Publications (2)
Publication Number | Publication Date |
---|---|
EP3514638A1 true EP3514638A1 (de) | 2019-07-24 |
EP3514638B1 EP3514638B1 (de) | 2021-04-21 |
Family
ID=65033349
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP19150418.2A Active EP3514638B1 (de) | 2018-01-22 | 2019-01-04 | Automatische manipulationsdetektion in vernetzten steuerungssystemen |
Country Status (4)
Country | Link |
---|---|
US (1) | US10922412B2 (de) |
EP (1) | EP3514638B1 (de) |
JP (1) | JP7352354B2 (de) |
CN (1) | CN110069049B (de) |
Families Citing this family (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20210026699A1 (en) * | 2018-03-30 | 2021-01-28 | Nec Corporation | Operation management apparatus, method, and non-transitory computer readable medium |
FR3083215A1 (fr) * | 2018-07-02 | 2020-01-03 | Airbus (S.A.S.) | Aeronef equipe d'un systeme d'estimation des parametres d'un impact |
US20210192909A1 (en) * | 2019-12-20 | 2021-06-24 | Honeywell International Inc. | On-camera tamper detection |
CN111722848B (zh) * | 2020-06-25 | 2021-10-08 | 物鼎安全科技(武汉)有限公司 | 一种网络组件识别方法 |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE10326665A1 (de) * | 2003-06-11 | 2005-01-20 | Endress + Hauser Process Solutions Ag | Verfahren zum Überwachen eines Feldgerätes |
DE102008024979A1 (de) * | 2008-05-23 | 2009-11-26 | Bayerische Motoren Werke Aktiengesellschaft | Bordnetz-System eines Kraftfahrzeugs und ein Verfahren zum Betrieb des Bordnetz-Systems |
EP2284634A1 (de) * | 2009-08-12 | 2011-02-16 | REpower Systems AG | Verfahren und Anordnung zur automatischen Konfigurationsparameterkontrolle bei Windenergieanlagen |
EP2463736A2 (de) * | 2010-12-09 | 2012-06-13 | Schneider Electric Industries SAS | Vorrichtungsmanager |
Family Cites Families (14)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5794062A (en) * | 1995-04-17 | 1998-08-11 | Ricoh Company Ltd. | System and method for dynamically reconfigurable computing using a processing unit having changeable internal hardware organization |
US7107326B1 (en) * | 2000-10-13 | 2006-09-12 | 3Com Corporation | Method and system for integrating IP address reservations with policy provisioning |
US6925481B2 (en) * | 2001-05-03 | 2005-08-02 | Symantec Corp. | Technique for enabling remote data access and manipulation from a pervasive device |
US9753864B2 (en) * | 2011-06-15 | 2017-09-05 | Nokia Technologies Oy | Method and apparatus for implementing memory segment access control in a distributed memory environment |
JP5652444B2 (ja) * | 2012-08-31 | 2015-01-14 | 横河電機株式会社 | 保守支援システム及び方法 |
US8984641B2 (en) * | 2012-10-10 | 2015-03-17 | Honeywell International Inc. | Field device having tamper attempt reporting |
US9401923B2 (en) | 2013-10-23 | 2016-07-26 | Christopher Valasek | Electronic system for detecting and preventing compromise of vehicle electrical and control systems |
BR112017007052A2 (pt) * | 2014-10-08 | 2018-06-19 | Assurant, Inc. | métodos, aparelhos e sistemas para análise de rede. |
KR101610534B1 (ko) * | 2014-11-03 | 2016-04-07 | 현대자동차주식회사 | 연료전지 시스템의 전류센서 고장 진단 방법 |
US10291506B2 (en) * | 2015-03-04 | 2019-05-14 | Fisher-Rosemount Systems, Inc. | Anomaly detection in industrial communications networks |
US9817391B2 (en) * | 2015-06-02 | 2017-11-14 | Rockwell Automation Technologies, Inc. | Security system for industrial control infrastructure |
US10051059B2 (en) * | 2015-06-05 | 2018-08-14 | Fisher-Rosemount Systems, Inc. | Methods and apparatus to control communications of endpoints in an industrial enterprise system based on integrity |
US10126342B2 (en) * | 2015-08-20 | 2018-11-13 | Bose Corporation | Electrical hub including current sensor |
US10423151B2 (en) * | 2017-07-07 | 2019-09-24 | Battelle Energy Alliance, Llc | Controller architecture and systems and methods for implementing the same in a networked control system |
-
2018
- 2018-01-22 US US15/876,638 patent/US10922412B2/en active Active
- 2018-12-26 CN CN201811599034.1A patent/CN110069049B/zh active Active
-
2019
- 2019-01-04 EP EP19150418.2A patent/EP3514638B1/de active Active
- 2019-01-07 JP JP2019000685A patent/JP7352354B2/ja active Active
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE10326665A1 (de) * | 2003-06-11 | 2005-01-20 | Endress + Hauser Process Solutions Ag | Verfahren zum Überwachen eines Feldgerätes |
DE102008024979A1 (de) * | 2008-05-23 | 2009-11-26 | Bayerische Motoren Werke Aktiengesellschaft | Bordnetz-System eines Kraftfahrzeugs und ein Verfahren zum Betrieb des Bordnetz-Systems |
EP2284634A1 (de) * | 2009-08-12 | 2011-02-16 | REpower Systems AG | Verfahren und Anordnung zur automatischen Konfigurationsparameterkontrolle bei Windenergieanlagen |
EP2463736A2 (de) * | 2010-12-09 | 2012-06-13 | Schneider Electric Industries SAS | Vorrichtungsmanager |
Also Published As
Publication number | Publication date |
---|---|
JP7352354B2 (ja) | 2023-09-28 |
US10922412B2 (en) | 2021-02-16 |
CN110069049A (zh) | 2019-07-30 |
US20190228156A1 (en) | 2019-07-25 |
CN110069049B (zh) | 2024-05-31 |
EP3514638B1 (de) | 2021-04-21 |
JP2019133649A (ja) | 2019-08-08 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP3514638A1 (de) | Automatische manipulationsdetektion in vernetzten steuerungssystemen | |
US9969508B2 (en) | Aircraft LRU data collection and reliability prediction | |
AU2021201799B2 (en) | Apparatus and method for using a distributed systems architecture (DSA) in an internet of things (IoT) edge appliance | |
US7752025B2 (en) | Parameter identification for field devices used in automation technology | |
US9032522B1 (en) | PLC backplane analyzer for field forensics and intrusion detection | |
US11063855B2 (en) | Monitoring of the data transmission in a client/server-based device access system | |
EP3007386B1 (de) | Vorrichtung und verfahren zur analyse eines steuernetzwerks | |
EP2630546B1 (de) | Vorrichtung und verfahren für erweiterte alarmfunktionen in feldsgerätprotokollen | |
JP7168567B2 (ja) | 産業ロボット応用の動作データを収集するための方法および装置 | |
US10320747B2 (en) | Automation network and method for monitoring the security of the transfer of data packets | |
US11561525B2 (en) | Flexible condition monitoring of industrial machines | |
JP7081593B2 (ja) | 機器管理システム、モデル学習方法およびモデル学習プログラム | |
EP3871057B1 (de) | Verfahren, vorrichtung und system zur verwaltung von alarmen | |
EP4141587A1 (de) | Verfahren und vorrichtung zur erweiterten diagnoseabdeckung einer sekundären vorrichtung eines redundanten controllerpaares | |
JP7027569B2 (ja) | 診断機器と機械保護システムとの統合 | |
JP2019205125A (ja) | 異常要因判定装置、制御システム、および異常要因判定方法 | |
US11695660B2 (en) | Monitoring system, setting device, and monitoring method | |
KR102008389B1 (ko) | 산업 제어 시스템을 위한 고장 판단 방법 및 그 장치 | |
US11449403B2 (en) | Apparatus and method for diagnosing faults in a fieldbus interface module | |
CN114676019B (en) | Method, device, equipment and storage medium for monitoring state of central processing unit | |
US20230185652A1 (en) | Real-time self-adaptive tuning and control of a device using machine learning |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE |
|
17P | Request for examination filed |
Effective date: 20190104 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
AX | Request for extension of the european patent |
Extension state: BA ME |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: EXAMINATION IS IN PROGRESS |
|
17Q | First examination report despatched |
Effective date: 20200226 |
|
GRAP | Despatch of communication of intention to grant a patent |
Free format text: ORIGINAL CODE: EPIDOSNIGR1 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: GRANT OF PATENT IS INTENDED |
|
INTG | Intention to grant announced |
Effective date: 20201118 |
|
GRAS | Grant fee paid |
Free format text: ORIGINAL CODE: EPIDOSNIGR3 |
|
GRAA | (expected) grant |
Free format text: ORIGINAL CODE: 0009210 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE PATENT HAS BEEN GRANTED |
|
AK | Designated contracting states |
Kind code of ref document: B1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
REG | Reference to a national code |
Ref country code: GB Ref legal event code: FG4D |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: EP |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R096 Ref document number: 602019003937 Country of ref document: DE Ref country code: IE Ref legal event code: FG4D |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: REF Ref document number: 1385303 Country of ref document: AT Kind code of ref document: T Effective date: 20210515 |
|
REG | Reference to a national code |
Ref country code: LT Ref legal event code: MG9D |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: MK05 Ref document number: 1385303 Country of ref document: AT Kind code of ref document: T Effective date: 20210421 |
|
REG | Reference to a national code |
Ref country code: NL Ref legal event code: MP Effective date: 20210421 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: NL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: AT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: BG Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210721 Ref country code: FI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: HR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: LT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: GR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210722 Ref country code: IS Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210821 Ref country code: LV Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: NO Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210721 Ref country code: PL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: PT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210823 Ref country code: RS Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: SE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R097 Ref document number: 602019003937 Country of ref document: DE |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: CZ Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: DK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: RO Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: SM Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: SK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: EE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: ES Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 |
|
PLBE | No opposition filed within time limit |
Free format text: ORIGINAL CODE: 0009261 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT |
|
26N | No opposition filed |
Effective date: 20220124 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: IS Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210821 Ref country code: AL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: IT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MC Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: PL |
|
REG | Reference to a national code |
Ref country code: BE Ref legal event code: MM Effective date: 20220131 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LU Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20220104 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: BE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20220131 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LI Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20220131 Ref country code: CH Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20220131 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: IE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20220104 |
|
P01 | Opt-out of the competence of the unified patent court (upc) registered |
Effective date: 20230516 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 Ref country code: CY Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20210421 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: DE Payment date: 20240129 Year of fee payment: 6 Ref country code: GB Payment date: 20240129 Year of fee payment: 6 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: HU Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO Effective date: 20190104 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: FR Payment date: 20240125 Year of fee payment: 6 |